Patch Tuesday Archive
Patch Tuesday August 2020
Total CVEs
121
Critical
18
Important
103
Exploited
2
Publicly Disclosed
2
All CVEs this month 121
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2020-1417 | Windows Kernel Elevation of Privilege Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-1464 | Windows Spoofing Vulnerability | Important | 7.8 |
Microsoft Windows | Yes | Yes | - |
| CVE-2020-1470 | Windows Work Folders Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1509 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1510 | Win32k Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1516 | Windows Work Folders Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1517 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1518 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1519 | Windows UPnP Device Host Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1520 | Windows Font Driver Host Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1521 | Windows Speech Runtime Elevation of Privilege Vulnerability | Important | 7.8 |
Windows AI | - | - | - |
| CVE-2020-1522 | Windows Speech Runtime Elevation of Privilege Vulnerability | Important | 7.8 |
Windows AI | - | - | - |
| CVE-2020-1524 | Windows Speech Shell Components Elevation of Privilege Vulnerability | Important | 7.8 |
Windows AI | - | - | - |
| CVE-2020-1525 | Media Foundation Memory Corruption Vulnerability | Critical | 7.8 |
Windows Media | - | - | - |
| CVE-2020-1526 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1527 | Windows Custom Protocol Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1528 | Windows Radio Manager API Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1529 | Windows GDI Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1530 | Windows Remote Access Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1531 | Windows Accounts Control Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Shell | - | - | - |
| CVE-2020-1533 | Windows WalletService Elevation of Privilege Vulnerability | Important | 7.8 |
Windows WalletService | - | - | - |
| CVE-2020-1534 | Windows Backup Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1535 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1536 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1537 | Windows Remote Access Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1538 | Windows UPnP Device Host Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1539 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1540 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1541 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1542 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1543 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1544 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1545 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1546 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1547 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1548 | Windows WaasMedic Service Information Disclosure Vulnerability | Important | 7.8 |
Windows Update Stack | - | - | - |
| CVE-2020-1549 | Windows CDP User Components Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1550 | Windows CDP User Components Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1377 | Windows Registry Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Registry | - | - | - |
| CVE-2020-1378 | Windows Registry Elevation of Privilege Vulnerability | Important | 7.5 |
Windows Registry | - | - | - |
| CVE-2020-1379 | Media Foundation Memory Corruption Vulnerability | Critical | 5.5 |
Windows Media | - | - | - |
| CVE-2020-1383 | Windows RRAS Service Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-1380 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.8 |
Microsoft Scripting Engine | Yes | - | - |
| CVE-2020-1455 | Microsoft SQL Server Management Studio Denial of Service Vulnerability | Important | 5.3 |
SQL Server | - | - | - |
| CVE-2020-1459 | Windows ARM Information Disclosure Vulnerability | Important | 7.5 |
Microsoft Windows | - | - | - |
| CVE-2020-1339 | Windows Media Remote Code Execution Vulnerability | Critical | 7.8 |
Windows Media | - | - | - |
| CVE-2020-1337 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2020-1466 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | Important | 7.8 |
Windows RDP | - | - | - |
| CVE-2020-1467 | Windows Hard Link Elevation of Privilege Vulnerability | Important | 10 |
Microsoft Windows | - | - | - |
| CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability | Critical | 5.5 |
Windows Netlogon | - | - | - |
| CVE-2020-1473 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1474 | Windows Image Acquisition Service Information Disclosure Vulnerability | Important | 7.8 |
Windows COM | - | - | - |
| CVE-2020-1475 | Windows Server Resource Management Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1476 | ASP.NET and .NET Elevation of Privilege Vulnerability | Important | 5.5 |
.NET Framework | - | - | - |
| CVE-2020-1477 | Media Foundation Memory Corruption Vulnerability | Critical | 7 |
Windows Media Player | - | - | - |
| CVE-2020-1478 | Media Foundation Memory Corruption Vulnerability | Important | 7.8 |
Windows Media Player | - | - | - |
| CVE-2020-1479 | DirectX Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-1480 | Windows GDI Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1483 | Microsoft Outlook Memory Corruption Vulnerability | Critical | 5 |
Microsoft Office | - | - | - |
| CVE-2020-1484 | Windows Work Folders Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1485 | Windows Image Acquisition Service Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-1486 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1487 | Media Foundation Information Disclosure Vulnerability | Important | 7.8 |
Windows Media | - | - | - |
| CVE-2020-1488 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Important | 7 |
Microsoft Windows | - | - | - |
| CVE-2020-1489 | Windows CSC Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1490 | Windows Storage Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1492 | Media Foundation Memory Corruption Vulnerability | Critical | 7.8 |
Microsoft Video Control | - | - | - |
| CVE-2020-1493 | Microsoft Outlook Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office | - | - | - |
| CVE-2020-1494 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1495 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1496 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1497 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office | - | - | - |
| CVE-2020-1498 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1499 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1500 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1501 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1502 | Microsoft Word Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office | - | - | - |
| CVE-2020-1503 | Microsoft Word Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office | - | - | - |
| CVE-2020-1504 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1505 | Microsoft SharePoint Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1511 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1512 | Windows State Repository Service Information Disclosure Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1513 | Windows CSC Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1515 | Windows Telephony Server Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1551 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1552 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 8 |
Microsoft Windows | - | - | - |
| CVE-2020-1553 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1554 | Media Foundation Memory Corruption Vulnerability | Critical | 7.8 |
Windows Media | - | - | - |
| CVE-2020-1555 | Scripting Engine Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-1556 | Windows WalletService Elevation of Privilege Vulnerability | Important | 7.8 |
Windows WalletService | - | - | - |
| CVE-2020-1557 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.3 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1558 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1560 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability | Critical | 7.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2020-1561 | Microsoft Graphics Components Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1562 | Microsoft Graphics Components Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1563 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-1564 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1565 | Windows Elevation of Privilege Vulnerability | Important | 7.5 |
Windows Shell | - | - | - |
| CVE-2020-1566 | Windows Kernel Elevation of Privilege Vulnerability | Important | 4.2 |
Microsoft Windows | - | - | - |
| CVE-2020-1567 | MSHTML Engine Remote Code Execution Vulnerability | Critical | 4.2 |
Internet Explorer | - | - | - |
| CVE-2020-1568 | Microsoft Edge PDF Remote Code Execution Vulnerability | Critical | 7.5 |
Microsoft Edge (HTML-based) | - | - | - |
| CVE-2020-1569 | Microsoft Edge Memory Corruption Vulnerability | Important | 7.8 |
Microsoft Edge (HTML-based) | - | - | - |
| CVE-2020-1570 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-1571 | Windows Setup Elevation of Privilege Vulnerability | Important | 7.3 |
Windows Update Stack | - | - | - |
| CVE-2020-1573 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.5 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1574 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability | Critical | 5.5 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2020-1577 | DirectWrite Information Disclosure Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1578 | Windows Kernel Information Disclosure Vulnerability | Important | 4.7 |
Windows Kernel | - | - | - |
| CVE-2020-1579 | Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1580 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-1581 | Microsoft Office Click-to-Run Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-1582 | Microsoft Access Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-1583 | Microsoft Word Information Disclosure Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-1584 | Windows dnsrslvr.dll Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1585 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2020-1587 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1591 | Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2020-1597 | ASP.NET Core Denial of Service Vulnerability | Important | 7.5 |
ASP.NET | - | Yes | - |
| CVE-2020-0604 | Visual Studio Code Remote Code Execution Vulnerability | Important | 7.8 |
Visual Studio | - | - | - |
| CVE-2020-1046 | .NET Framework Remote Code Execution Vulnerability | Critical | 7.8 |
.NET Framework | - | - | - |
| CVE-2020-1182 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | Critical | 7.3 |
Microsoft Dynamics | - | - | - |
Threat Categories 5
| Threat Category | CVEs | Critical |
|---|---|---|
| Elevation of Privilege | 61 | 1 |
| Remote Code Execution | 34 | 17 |
| Information Disclosure | 16 | - |
| Spoofing | 7 | - |
| Denial of Service | 3 | - |
Affected Products 27
| Product | CVEs | Exploited |
|---|---|---|
| Microsoft Windows | 50 | 1 |
| Microsoft Office | 14 | - |
| Microsoft Office SharePoint | 6 | - |
| Microsoft Graphics Component | 5 | - |
| Windows Media | 5 | - |
| Microsoft JET Database Engine | 4 | - |
| Microsoft Scripting Engine | 3 | 1 |
| Microsoft Windows Codecs Library | 3 | - |
| Windows AI | 3 | - |
| Windows Kernel | 3 | - |
| .NET Framework | 2 | - |
| Microsoft Dynamics | 2 | - |
| Microsoft Edge (HTML-based) | 2 | - |
| Windows Media Player | 2 | - |
| Windows Registry | 2 | - |
| Windows Shell | 2 | - |
| Windows Update Stack | 2 | - |
| Windows WalletService | 2 | - |
| ASP.NET | 1 | - |
| Internet Explorer | 1 | - |
| Microsoft Video Control | 1 | - |
| SQL Server | 1 | - |
| Visual Studio | 1 | - |
| Windows COM | 1 | - |
| Windows Netlogon | 1 | - |
| Windows Print Spooler Components | 1 | - |
| Windows RDP | 1 | - |